$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa File: cf80f08c-152d-3bb2-b48b-341b799003f6.roa (raw, json) Hash identifier: k+qVxFgTpNOORHarLgMKhrZEp49PQoaLibM7W+U6BTs= Subject key identifier: 1B:E6:0C:2C:6B:DA:71:85:C2:50:88:20:32:74:2A:AE:24:51:6E:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B4DAB46A35BEBB1449A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.24.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:4d:ab:46:a3:5b:eb:b1:44:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=8550f62d-d5d1-40b4-9584-d646b3fae3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:70:97:c5:f2:19:90:ea:8a:e1:6b:74:4f: 9f:64:12:23:56:37:e6:cb:44:ff:50:70:91:d1:62: 04:37:cf:e2:9f:09:b7:5d:8d:ef:55:0e:8e:10:28: fd:e8:e1:81:67:eb:0e:c8:47:25:95:e3:f0:a9:75: e0:15:ab:d7:50:e9:2c:ad:11:95:a7:77:2f:c0:50: c4:62:18:4f:32:68:31:4a:60:1f:93:f1:14:5b:7e: 74:a6:05:cf:75:70:46:c3:ba:fc:20:d6:82:d4:86: e5:c6:98:5b:c0:bf:a4:ba:72:4f:d0:c5:00:b5:67: 40:e1:d7:99:66:44:fb:89:35:09:d0:4a:ae:26:f6: 46:6d:e8:b6:9a:b3:98:cc:1f:8e:f5:ed:0f:9a:40: a5:b7:ea:c7:6e:5a:eb:40:43:1b:5f:07:c2:85:5b: 19:68:ef:bc:a9:c5:3b:ec:1d:86:8a:81:ab:a1:5b: b2:51:20:9d:8b:43:bf:3d:1b:b8:0a:b3:97:e7:ea: 0c:8d:e4:63:48:88:28:88:78:40:58:30:e6:3a:70: fd:14:c9:35:c9:a3:af:98:1f:e2:5b:54:14:e0:1d: 75:8f:60:bb:06:08:f2:ed:26:7a:20:9f:cc:79:f4: b5:f0:86:65:df:22:79:d3:aa:41:70:3a:38:7f:8c: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E6:0C:2C:6B:DA:71:85:C2:50:88:20:32:74:2A:AE:24:51:6E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:02:00:ed:59:54:54:e9:62:ad:20:5a:83:81:f1:bf:78:78: a6:78:a0:dd:f1:7a:6d:df:1e:81:f2:01:6a:f3:5c:1b:1c:15: 75:61:3e:85:83:e6:d4:ec:4b:e2:2d:65:ec:e0:6c:a2:b2:b5: 03:c7:d5:9f:7c:3c:7a:fc:e8:90:bd:1f:8d:5a:7f:72:fd:63: 1c:3e:50:1b:84:e4:f8:26:85:68:27:58:96:71:0f:67:a5:3d: 5b:8e:27:ba:1b:b6:79:8f:dd:22:75:76:43:18:4f:50:84:a7: 09:40:1f:8f:1f:52:59:4f:50:a8:4f:15:33:21:ee:07:c0:ff: 75:52:c0:aa:3e:eb:08:30:77:c7:2c:11:4d:23:d4:d5:83:8a: 3f:96:6a:d9:c0:53:4b:67:c4:0b:60:20:93:28:ef:26:f2:d5: 70:3c:5a:f1:b2:82:e4:75:1b:ff:a5:be:8b:62:2f:73:10:01: 51:0a:36:3d:eb:cf:d0:d2:04:b5:cf:95:06:1d:3b:ec:30:53: 97:5c:9f:80:e5:6e:ad:96:6f:03:6a:24:97:7f:43:89:63:5e: fd:c7:70:4e:94:26:00:da:4d:00:e2:ea:48:76:30:64:de:0f: 92:3a:f7:59:1d:27:9e:27:15:9f:8f:71:5d:be:89:11:1f:b9: 2e:ac:55:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm02rRqNb67FEmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODU1MGY2MmQtZDVkMS00MGI0LTk1ODQtZDY0NmIzZmFlM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggdwl8XyGZDqiuFrdE+fZBIjVjfmy0T/UHCR 0WIEN8/inwm3XY3vVQ6OECj96OGBZ+sOyEcllePwqXXgFavXUOksrRGVp3cvwFDE YhhPMmgxSmAfk/EUW350pgXPdXBGw7r8INaC1IblxphbwL+kunJP0MUAtWdA4deZ ZkT7iTUJ0EquJvZGbei2mrOYzB+O9e0PmkClt+rHblrrQEMbXwfChVsZaO+8qcU7 7B2GioGroVuyUSCdi0O/PRu4CrOX5+oMjeRjSIgoiHhAWDDmOnD9FMk1yaOvmB/i W1QU4B11j2C7Bgjy7SZ6IJ/MefS18IZl3yJ506pBcDo4f4zPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvmDCxr2nGFwlCIIDJ0Kq4kUW60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4MGYwOGMtMTUyZC0z YmIyLWI0OGItMzQxYjc5OTAwM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoCAO1ZVFTpYq0gWoOB8b94eKZ4oN3xem3fHoHyAWrzXBscFXVhPoWD 5tTsS+ItZezgbKKytQPH1Z98PHr86JC9H41af3L9Yxw+UBuE5PgmhWgnWJZxD2el PVuOJ7obtnmP3SJ1dkMYT1CEpwlAH48fUllPUKhPFTMh7gfA/3VSwKo+6wgwd8cs EU0j1NWDij+WatnAU0tnxAtgIJMo7yby1XA8WvGyguR1G/+lvotiL3MQAVEKNj3r z9DSBLXPlQYdO+wwU5dcn4Dlbq2WbwNqJJd/Q4ljXv3HcE6UJgDaTQDi6kh2MGTe D5I691kdJ54nFZ+PcV2+iREfuS6sVQE= -----END CERTIFICATE-----Generated at Sat Jun 13 17:10:35 2026 by rpki-client